infra
/
ansible
4
5
Fork 5
Code Issues 6 Pull Requests Activity
ansible/group_vars/all/vars.yml

77 lines
3.1 KiB
YAML
Raw Normal View History

Add ldap-client role.
2016-01-04 20:05:08 +01:00
---
Update certmgr version and dependencies.
2016-04-05 08:42:31 +02:00
certmgr_mode: webserver
Add gogs role.
2016-04-09 23:41:41 +02:00
gogs_domain: git.binary-kitchen.de
gogs_dbname: gogs
gogs_dbuser: gogs
Move passwords into vault
2018-06-11 14:46:25 +02:00
gogs_dbpass: "{{ vault_gogs_dbpass }}"
Add gogs role.
2016-04-09 23:41:41 +02:00
hackmd: new role (not finished yet)
2018-04-09 21:28:36 +02:00
hackmd_domain: pad.binary-kitchen.de
hackmd_dbname: hackmd
hackmd_dbuser: hackmd
Move passwords into vault
2018-06-11 14:46:25 +02:00
hackmd_dbpass: "{{ vault_hackmd_dbpass }}"
hackmd: improve (csp, hsts, version bump) and start to use vault
2018-06-04 14:00:55 +02:00
hackmd_secret: "{{ vault_hackmd_secret }}"
hackmd: new role (not finished yet)
2018-04-09 21:28:36 +02:00
Fix ldap-server (confirmed working on debian).
2016-03-24 11:43:40 +01:00
ldap_ca: /etc/ldap/ssl/BKCA.crt
Rename some LDAP related variables.
2016-01-25 18:47:51 +01:00
ldap_uri: ldaps://ldap.binary.kitchen/
ldap_host: ldap.binary.kitchen
ldap_base: dc=binary-kitchen,dc=de
Fix LDAP and adjust to new schema.
2016-04-01 20:27:29 +02:00
ldap_binddn: cn=Services,ou=roles,dc=binary-kitchen,dc=de
Move passwords into vault
2018-06-11 14:46:25 +02:00
ldap_bindpw: "{{ vault_ldap_bindpw }}"
Rename some LDAP related variables.
2016-01-25 18:47:51 +01:00
Add incomplete librenms role.
2016-07-06 13:26:42 +02:00
librenms_domain: librenms.binary.kitchen
librenms_dbname: librenms
librenms_dbuser: librenms
Move passwords into vault
2018-06-11 14:46:25 +02:00
librenms_dbpass: "{{ vault_librenms_dbpass }}"
Add incomplete librenms role.
2016-07-06 13:26:42 +02:00
Use production domain for mail.
2016-03-30 22:08:37 +02:00
mail_domain: binary-kitchen.de
Allow more virtual postfix domains and make aliases configurable.
2016-04-06 21:38:54 +02:00
mail_domains:
- ccc-r.de
- ccc-regensburg.de
Fix mail-related certificate handling.
2016-04-01 08:10:00 +02:00
mail_server: mail.binary-kitchen.de
Use production domain for mail.
2016-03-30 22:08:37 +02:00
mailman_domain: lists.binary-kitchen.de
mail: trust 213.166.246.250/32 (NATed VMs)
2018-07-23 21:53:31 +02:00
mail_trusted: 213.166.246.0/28 213.166.246.250/32 [2a02:958:0:f6::]/124
Allow more virtual postfix domains and make aliases configurable.
2016-04-06 21:38:54 +02:00
mail_aliases:
- "info@binary-kitchen.de vorstand@binary-kitchen.de"
- "lebercast@binary-kitchen.de anti@binary-kitchen.de,dragonchaser@binary-kitchen.de,moepman@binary-kitchen.de,philmacfly@binary-kitchen.de,ralf@binary-kitchen.de"
update mail aliases (workshop stuff)
2018-07-24 13:07:35 +02:00
- "loetworkshop@binary-kitchen.de marei@binary-kitchen.de,timo.schindler@binary-kitchen.de"
Allow more virtual postfix domains and make aliases configurable.
2016-04-06 21:38:54 +02:00
- "mayday@binary-kitchen.de anti@binary-kitchen.de"
mail: update siebdruck alias, add seife alias
2018-04-22 12:08:34 +02:00
- "seife@binary-kitchen.de anke@binary-kitchen.de"
- "siebdruck@binary-kitchen.de anke@binary-kitchen.de"
update mail aliases
2018-08-27 21:50:33 +02:00
- "root@binary-kitchen.de moepman@binary-kitchen.de,kishi@binary-kitchen.de,tomoto@binary-kitchen.de"
Add avarrish to vorstand mail alias.
2016-08-24 09:13:11 +02:00
- "vorstand@binary-kitchen.de anti@binary-kitchen.de,avarrish@binary-kitchen.de,moepman@binary-kitchen.de,philmacfly@binary-kitchen.de"
fix typo
2018-07-24 13:13:15 +02:00
- "workshops@binary-kitchen.de marei@binary-kitchen.de,timo.schindler@binary-kitchen.de"
new mail alias for openhab
2018-01-10 12:25:00 +01:00
- "openhab@binary-kitchen.de noby@binary-kitchen.de"
Allow more virtual postfix domains and make aliases configurable.
2016-04-06 21:38:54 +02:00
- "orga@ccc-r.de orga@ccc-regensburg.de"
- "orga@ccc-regensburg.de anti@binary-kitchen.de"
Add config files and extend tasks for mail role.
2016-02-15 21:04:01 +01:00
Fix LDAP and adjust to new schema.
2016-04-01 20:27:29 +02:00
nslcd_base_group: ou=groups,dc=binary-kitchen,dc=de
nslcd_base_shadow: ou=people,dc=binary-kitchen,dc=de
nslcd_base_passwd: ou=people,dc=binary-kitchen,dc=de
Add/merge group_vars.
2016-01-07 23:28:42 +01:00
Add owncloud role.
2016-04-05 08:44:23 +02:00
owncloud_domain: oc.binary-kitchen.de
owncloud_dbname: owncloud
owncloud_dbuser: owncloud
Move passwords into vault
2018-06-11 14:46:25 +02:00
owncloud_dbpass: "{{ vault_owncloud_dbpass }}"
Add owncloud role.
2016-04-05 08:44:23 +02:00
Add prosody role.
2016-02-11 16:15:38 +01:00
prosody_admin: moepman@jabber.binary-kitchen.de
prosody_domain: jabber.binary-kitchen.de
Add/merge group_vars.
2016-01-07 23:28:42 +01:00
Add racktables role (unfinished) and apply it.
2016-06-18 13:23:12 +02:00
racktables_domain: racktables.binary.kitchen
racktables_dbname: racktables
racktables_dbuser: racktables
Move passwords into vault
2018-06-11 14:46:25 +02:00
racktables_dbpass: "{{ vault_racktables_dbpass }}"
Add racktables role (unfinished) and apply it.
2016-06-18 13:23:12 +02:00
radius: update to freeradius 3 (and no more LDAP)
2018-07-17 10:43:31 +02:00
radius_secret: "{{ vault_radius_secret }}"
root-keys: new role to set ssh authorized keys for the root user
2018-09-17 22:03:35 +02:00
root_keys:
- "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1McRltT0B2bAN1pVDQ+ApJL/rhnvu9gAyGamXwGAgt3V5Q/+VT+KY+0x2T5kgPsuBOio/SDKPY6zoadomU+l3QXtfiE797j7rOjHrIUJor6fMubpVg8jU9E9pytN/vgYSVy286hLmTnHNjTZYlwhMCFA2xAJfyutypY0igAlUh6NNL3PK0LRESd12ttavDX65R2zZpJqBTcKZEXt8y1D+YArxmAa09cS9X4SH8z5h1HWHJ3G60U2nIrdPegADnUXitL5Fup5xok89B4zpILRXz9PmnLXHCTXLu4DamIFPbObnXyjT9gsSMAkOUc6m8TzVgek/7ImL/hQiZU2woQ9p moepman"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJBmZnJLG1WRppbLtOAJw3E4LgLRK0NirfCgpovhhU6h moepman"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIETMJ1JTX+xKC7ML8Or+8wunwy1rjIkp7MfeZLzLIyvP tomoto"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINPlktM2x11cNBMKurf57MLE1XcOm2sGQXguc0tl1vYd rudi@helheim"
Add/merge group_vars.
2016-01-07 23:28:42 +01:00
snmp_allowed:
- 172.23.2.5
- 172.23.2.6